magento-performance-analyst
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, encoded payloads, or unauthorized data exfiltration behaviors were detected. The skill contains standard technical documentation, tool references (Blackfire, New Relic), and Magento CLI commands consistent with its stated purpose. External links point to trusted official Adobe Commerce developer documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external artifacts, which creates a potential attack surface for indirect prompt injection. 1. Ingestion points: The skill analyzes application source code, profiling reports (XHProf, Blackfire), and database query logs (SKILL.md). 2. Boundary markers: The instructions do not specify any delimiters or safety prompts to isolate the analyzed data from the agent's instructions. 3. Capability inventory: The skill utilizes the Magento CLI toolset and file system access to perform analysis and configuration (SKILL.md). 4. Sanitization: There are no explicit instructions to sanitize or validate the contents of logs or code before processing.
Audit Metadata